$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft File: gTpuT37cWLx6SLbR_XwZ39go8fE.mft (raw, json) Hash identifier: GO8nm9Jpjz3Zoxcr3pojK0bew/INLe0Bsi81ypmwGxU= Subject key identifier: 04:D7:3C:3F:D4:0A:E5:65:15:81:3C:88:2E:13:9C:A4:04:8C:36:F5 Authority key identifier: 81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1 Certificate issuer: /CN=A91E0CF5/serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft Manifest number: B0 Signing time: Thu 03 Jul 2025 06:13:22 +0000 Manifest this update: Thu 03 Jul 2025 06:13:22 +0000 Manifest next update: Thu 10 Jul 2025 06:13:22 +0000 Files and hashes: 1: gTpuT37cWLx6SLbR_XwZ39go8fE.crl (hash: R8ezDj2Y11rziv8rbV3qZsfUfdXLo3CnbrE/HT4MMtk=) 2: C0F3F504492B11EF8EF0D04FC4F9AE02.roa (hash: 9XdOr8ci0XxQ25MZorUAalomR3Uhklj1yk5ZzWVz3NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CF5, serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1 Validity Not Before: Jul 3 06:13:22 2025 GMT Not After : Jul 10 06:13:22 2025 GMT Subject: CN=68661f82-487f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:d1:3f:e5:bf:33:f7:9d:66:12:a4:18:89: f4:9c:04:43:8e:be:ac:37:b2:41:11:f8:b3:97:3e: 0b:8c:99:f3:f2:fa:5c:87:d2:1d:19:8c:79:a8:0d: 09:4c:67:51:42:23:49:72:9d:a3:51:84:a1:17:a5: b5:ee:b1:86:69:17:83:79:b0:29:0b:82:7f:0c:19: 80:fb:de:0d:72:8c:2a:a2:1f:c4:fb:ac:a6:0d:b9: ca:af:85:8f:66:c3:d5:0a:32:6f:6b:ad:ac:3f:01: 80:24:da:f1:36:07:ba:2a:98:06:99:67:f8:17:85: cc:bb:30:a2:9a:f9:80:99:cf:b8:47:04:a9:e8:ba: ab:1b:25:dc:9c:a9:1c:1d:ed:06:7c:0c:87:f3:a4: 24:bf:2e:a8:78:73:f5:72:d5:03:54:92:13:70:f9: ca:00:6d:e1:bc:ca:8f:c2:22:dd:1c:cb:29:11:59: 07:0b:10:f9:a7:c8:39:db:0f:5d:83:47:e3:89:39: 8d:f3:6c:3a:53:13:74:b6:c0:31:1f:9a:26:0c:60: 2e:5c:cf:8d:f3:3a:91:fc:b3:e1:b8:1a:b6:b9:3b: 43:bb:75:3a:74:e8:8a:db:1f:70:de:d7:db:09:56: 99:c8:b4:ac:68:03:93:d2:77:fe:62:71:96:13:4a: b8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D7:3C:3F:D4:0A:E5:65:15:81:3C:88:2E:13:9C:A4:04:8C:36:F5 X509v3 Authority Key Identifier: keyid:81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b2:3b:37:d8:bb:03:50:47:b9:6d:07:f4:2e:21:62:7d:8e: bb:20:9d:9f:7e:54:36:8a:af:23:0e:4d:cb:8b:b4:78:75:9c: 39:31:19:34:2f:45:30:4d:45:09:5a:5f:2c:13:12:c5:ca:a9: 3b:f1:49:0d:65:c0:c1:d0:24:f8:e6:39:2b:c5:77:3a:c7:55: 92:22:8f:07:19:41:f8:a0:44:e0:5e:bb:c0:69:c1:3a:44:27: 51:c5:ca:a9:a8:c2:bf:6c:01:b5:9e:81:e7:2c:97:01:d0:b3: f1:a0:4d:77:be:e3:1b:c5:47:28:a2:53:c3:7e:5e:83:43:42: b8:22:97:22:8a:40:7e:a8:33:ea:a7:fb:3c:ba:76:dc:43:ea: 6a:9f:fc:97:dc:df:12:d4:b4:fd:7c:76:98:03:1f:b1:c3:a0: c4:a8:da:c1:57:07:16:85:9a:72:2e:f5:f4:a0:8d:9c:1e:58: ec:6e:24:df:81:43:d7:03:04:19:79:63:10:8f:38:96:f3:04: ec:82:14:88:c1:c2:53:f5:fb:63:9f:fb:82:41:dc:e2:b3:84: e8:80:96:6b:19:4e:76:82:e4:07:e7:d8:85:9a:54:ce:6e:7d: a2:67:c6:e3:8a:92:f0:b3:2a:ca:4f:d8:ca:c7:41:9c:0d:ab: f8:11:e0:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRjUxMTAvBgNVBAUTKDgxM0E2RTRGN0VEQzU4QkM3QTQ4QjZEMUZEN0MxOURG RDgyOEYxRjEwHhcNMjUwNzAzMDYxMzIyWhcNMjUwNzEwMDYxMzIyWjAYMRYwFAYD VQQDEw02ODY2MWY4Mi00ODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLzRP+W/M/edZhKkGIn0nARDjr6sN7JBEfizlz4LjJnz8vpch9IdGYx5qA0J TGdRQiNJcp2jUYShF6W17rGGaReDebApC4J/DBmA+94Ncowqoh/E+6ymDbnKr4WP ZsPVCjJva62sPwGAJNrxNge6KpgGmWf4F4XMuzCimvmAmc+4RwSp6LqrGyXcnKkc He0GfAyH86Qkvy6oeHP1ctUDVJITcPnKAG3hvMqPwiLdHMspEVkHCxD5p8g52w9d g0fjiTmN82w6UxN0tsAxH5omDGAuXM+N8zqR/LPhuBq2uTtDu3U6dOiK2x9w3tfb CVaZyLSsaAOT0nf+YnGWE0q48QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATXPD/U CuVlFYE8iC4TnKQEjDb1MB8GA1UdIwQYMBaAFIE6bk9+3Fi8eki20f18Gd/YKPHx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS80QkI3QzY0NDQ5 MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi9nVHB1VDM3Y1dMeDZTTGJSX1h3WjM5Z284 ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2dUcHVUMzdjV0x4NlNMYlJfWHdaMzlnbzhmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENGNS80QkI3QzY0NDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi9nVHB1VDM3Y1dM eDZTTGJSX1h3WjM5Z284ZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcsjs32LsDUEe5bQf0LiFifY67IJ2fflQ2iq8jDk3Li7R4dZw5MRk0 L0UwTUUJWl8sExLFyqk78UkNZcDB0CT45jkrxXc6x1WSIo8HGUH4oETgXrvAacE6 RCdRxcqpqMK/bAG1noHnLJcB0LPxoE13vuMbxUcoolPDfl6DQ0K4IpciikB+qDPq p/s8unbcQ+pqn/yX3N8S1LT9fHaYAx+xw6DEqNrBVwcWhZpyLvX0oI2cHljsbiTf gUPXAwQZeWMQjziW8wTsghSIwcJT9ftjn/uCQdzis4TogJZrGU52guQH59iFmlTO bn2iZ8bjipLwsyrKT9jKx0GcDav4EeCJ -----END CERTIFICATE-----Generated at Thu Jul 3 23:44:45 2025 by rpki-client